Terms of Service & Privacy Policy

General Provisions

These Terms of Service and Privacy Policy (hereinafter — the "Agreement") govern the use of the Cortexo service (hereinafter — the "Service"), available at cortexo.tech and associated applications, as well as the processing of users' personal data.

The Service operator is LLC EMDEV, INN 7813313860 (hereinafter — "Operator", "Cortexo"). Contact email: info@cortexo.tech.

By using the Service, you unconditionally accept this Agreement in full. If you do not agree with any provision of the Agreement, please discontinue use of the Service immediately.

This Agreement is governed by the laws of the Russian Federation, including the Civil Code of the Russian Federation, Federal Law No. 149-FZ of 27.07.2006 "On Information, Information Technologies and Information Protection", Federal Law No. 152-FZ of 27.07.2006 "On Personal Data", and the Law of the Russian Federation No. 2300-1 of 07.02.1992 "On Consumer Rights Protection".

Service Description

Cortexo is an AI-assistant software service that processes user requests using large language models (LLMs) and can perform actions in connected applications (email, messengers, calendar, knowledge bases, and other services) on behalf of the user, subject to the user having granted the corresponding permissions.

The Service is provided on an "as is" basis and is currently in beta testing. Features, composition, and characteristics of the Service may change without prior notice.

Use of Large Language Models (AI)

3.1. Data Transfer to AI Providers

To process requests, Cortexo transmits the contents of user messages and related context to third-party large language model providers (including but not limited to Anthropic, OpenAI, Google, Yandex, and others), which may be located outside the Russian Federation. Transmission is carried out over secure communication channels.

By using the Service, the user consents to such data transfer, including cross-border transfer of personal data to countries that may not provide a level of personal data protection equivalent to Russian Federation legislation. The user accepts the associated risks.

Cortexo recommends not transmitting through the Service any information constituting state, commercial, or other legally protected secrets.

3.2. Generated Content

All text responses, summaries, document drafts, recommendations, and other outputs produced by the Service are automatically generated by AI systems and do not represent the opinion or position of Cortexo or of any qualified professionals (lawyers, doctors, financial advisors, etc.).

AI systems may produce factual errors, hallucinations, outdated information, or logical inconsistencies. Users are solely responsible for verifying all outputs before using, distributing, publishing, or sharing them with third parties.

3.3. Automated Actions

Cortexo may perform actions in third-party services (sending messages, creating events, modifying data) automatically — on behalf of the user, based on explicit or implied instructions from the user. All such actions are performed by automated AI systems. The user bears full responsibility for the consequences of automated actions they have authorized and is obligated to monitor their results.

Use of Google API Data

Cortexo's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4.1. Data Accessed

When a user connects a Google integration, the Service may access the following categories of data from the user's Google account:

• Gmail content: subject, body, attachments, and message metadata — only to read or send on the user's explicit instruction;
• Google Calendar events: title, description, attendees, and times — only to view or create/modify on the user's explicit instruction;
• Basic profile data (name, email address) — to identify the user within the Service.

4.2. Data Usage

Google account data is used exclusively to:

• Carry out specific tasks initiated by the user (reading, composing, or sending emails; viewing or creating calendar events);
• Build the request context that is passed to the AI model to generate a response;
• Authenticate and manage access to the integration.

Google data is not used for AI model training, advertising, or sale, and is not transferred to third parties for any purpose other than those explicitly stated in this section. Cortexo's use of Google user data is limited to providing or improving user-facing features that are visible and prominent in the requesting application's user interface.

4.3. Data Sharing

Data from a user's Google account is shared only with:

• AI model providers (Anthropic, OpenAI, and others) — solely as part of the request payload to generate a response for the user's task. Data is shared only to the minimum extent necessary to complete the specific task;
• Cloud infrastructure (Google Cloud) — for transit data handling as part of Service operation.

Google data is not disclosed to any other third parties without the user's explicit consent, except as required by applicable law. Cortexo does not allow humans to read Google user data unless: (i) explicit permission is obtained from the user for specific messages; (ii) it is necessary for security or to investigate abuse; (iii) it is required by applicable law; or (iv) data use is limited to internal operations and the data has been aggregated and anonymized.

4.4. Data Storage & Protection

Cortexo does not persistently store email or calendar content on its own servers — data is used transiently during the processing of each specific request. Session metadata (the fact that an integration was accessed, the type of operation) is retained in logs for no more than 90 days and is protected by organizational and technical measures (encryption in transit, access controls). All Google user data is accessed over encrypted HTTPS connections.

4.5. Data Retention & Deletion

Because Cortexo does not persistently store Google content, deletion requests apply to session metadata. To revoke the Service's access to your Google account:

• Disconnect the integration in the Service settings — this immediately terminates access;
• Revoke permissions in the Security section of your Google account (myaccount.google.com/permissions);
• Send a deletion request for session metadata to info@cortexo.tech — requests are processed within 30 business days.

Personal Data Processing

5.1. Categories of Data Processed

Cortexo processes the following categories of data:

• Identification data: name, email address, phone number;
• Data submitted by the user in requests (message text, files, context);
• Service usage metadata: request timestamps, device type, IP address;
• Data from connected services (where integration is enabled): email, chat, calendar, and file content — strictly to the extent necessary to perform the requested task.

5.2. Purposes of Processing

• Providing Service features and processing user requests;
• Authentication and security;
• Improving Service quality and model training (in anonymized form, where applicable);
• Communicating with the user regarding the Service;
• Compliance with Russian Federation legislation.

5.3. Legal Basis for Processing

Personal data is processed based on the data subject's consent (Article 6(1) of Federal Law No. 152-FZ) and for the performance of the agreement to which the user is a party.

5.4. Disclosure to Third Parties

User data may be shared with:

• AI model providers — for request processing (see Section 3.1);
• Cloud infrastructure providers — for data storage and transit;
• Government authorities — as required by Russian Federation law.

Cortexo does not sell users' personal data to third parties for marketing purposes.

5.5. Data Storage & Security

Personal data is stored on servers located in the Russian Federation (to the extent required by Federal Law No. 152-FZ) and is protected by organizational and technical security measures. Data transferred to AI model providers is processed in accordance with the respective providers' privacy policies.

5.6. User Rights

In accordance with Articles 14–17 of Federal Law No. 152-FZ, users have the right to:

• Obtain information about the processing of their personal data;
• Request correction, blocking, or deletion of their personal data;
• Withdraw consent to the processing of personal data;
• File a complaint with Roskomnadzor (the Russian data protection authority).

To exercise these rights, send a request to info@cortexo.tech. Requests are processed within 30 business days.

5.7. Retention Period

Personal data is retained for the duration of the user's account and for three years after its deletion, unless otherwise required by Russian Federation legislation.

User Rights and Obligations

6.1. User Rights

• Use the Service for personal and professional purposes in accordance with this Agreement;
• Contact support at info@cortexo.tech;
• Disconnect integrations with external services at any time.

6.2. User Obligations

• Not use the Service for unlawful purposes, including violation of third-party rights;
• Not attempt to circumvent technical restrictions of the Service;
• Independently verify the accuracy and completeness of any AI-generated output;
• Not transmit through the Service data whose distribution is restricted by law;
• Maintain the security of account credentials;
• Comply with applicable laws when using Service outputs.

6.3. Prohibited Use

It is prohibited to use the Service to:

• Create, distribute, or store unlawful content;
• Deceive, defraud, spread disinformation, or manipulate others;
• Infringe copyright or other intellectual property rights of third parties;
• Carry out automated actions harmful to third parties or their services;
• Engage in any activity prohibited under Russian Federation law.

Limitation of Liability

To the maximum extent permitted by applicable law, Cortexo shall not be liable:

• For the accuracy, completeness, timeliness, or suitability of any content generated by AI systems within the Service;
• For any direct, indirect, incidental, special, or other damages arising from the use of or inability to use the Service;
• For the consequences of automated actions carried out by the Service in third-party systems at the instruction or with the consent of the user;
• For the privacy policies, security practices, or actions of AI model providers and other third parties to whom data is transferred;
• For Service disruptions caused by third parties, technical failures, or force majeure circumstances;
• For decisions made by the user based on AI-generated outputs.

The user uses the Service at their own risk. The Service is provided "as is" without any warranties of fitness for a particular purpose.

Nothing in this Agreement limits user rights guaranteed under the Law of the Russian Federation "On Consumer Rights Protection" to the extent they cannot be contractually restricted.

Intellectual Property

All rights to the software, design, logos, trademarks, documentation, and other intellectual property constituting the Service belong to the Operator and its licensors.

Content created by the user and submitted through the Service (requests, uploaded files, etc.) remains the property of the user. The user grants the Operator a limited, royalty-free licence to process such content solely for the purpose of operating the Service.

Generated content is provided to the user for use within applicable copyright law. Cortexo does not guarantee the uniqueness of generated content.

Modification and Termination of the Service

Cortexo reserves the right to modify, restrict, or discontinue the Service (in whole or in part) at any time without prior notice. During the beta period, such changes may occur without reimbursement of any costs incurred by the user.

Cortexo may terminate a user's access to the Service in the event of a breach of this Agreement.

Amendment of the Agreement

Cortexo may unilaterally amend this Agreement. A new version takes effect upon its publication at cortexo.tech/terms/ unless otherwise stated. Continued use of the Service after publication of changes constitutes acceptance of the new version of the Agreement.

We recommend checking the current version of the Agreement periodically.

Governing Law and Dispute Resolution

This Agreement is governed by and construed in accordance with the laws of the Russian Federation. Disputes between the user and the Operator shall be resolved through negotiation, and if no agreement can be reached, through the courts at the Operator's place of registration, unless otherwise required by consumer protection legislation.

Contact

For questions related to this Agreement or the processing of personal data, please contact:

• Email: info@cortexo.tech
• Website: cortexo.tech

Requests are processed within 30 business days.